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WHAT IS CLAIMED IS: 



1 . A method for verifying a design of a circuit, comprising 
providing a model of the design; 

providing a first property for the design, wherein the first property describes a first 
behavior; 

checking the model using the first 
at a reset state until an example of the first befiavior 

providing a second property for the 
second behavior; and 

checking the model using the second 
starting at a state when the example of the firsjt 



pro|)erty and an environment of the design starting 
occurs; 

;n, wherein the second property describes a 



ijroperty and an environment of the design 
behavior occurs. 



2. The method of claim 1 , wherei ji 
providing a statement in a speclficati* 



on 



not occur. 



3. The method of claim 2, wherein 
or more environment variables, and wherein 
comprises: 

determining a set of values for the 
design to show an example of the first behaviojr. 



4. The method of claim 1 , further 
providing a state of the model of the 



26 occurs. 



5. The method of claim 1 , further 
providing the environment of the desigr 



6. The method of claim I , further c omprising: 
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PATENT 



providing the first property comprises: 
language stating that the first behavior does 



the environment of the design comprises one 
checking the model using the first property 

envi ronment variables that causes the model of the 



(iompnsmg: 



de jign when the example of the first behavior 



(jompnsing: 
starting at the reset state. 
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providing the environment of the \ 
first behavior occurs. 



PATENT 



desi in starting at a state when the example of the 



7. The method of claim 6: 

wherein the environment of the desigr comprises one or more environment variables; 

wherein the model of the design comprises one or more model variables; and 

wherein providing the environment of the design starting at the state when the 
example of the first behavior occurs comprises at least one of the group consisting of: 
describing the state when the e cample of the first behavior occurs; and 
providing the values of the environment variables and the model variables in 

each clock cycle preceding the examph when the first behavior occurs. 



ng a design of a circuit, comprising: 



8. A computer program for verify 
providing a model of the design; 

providing a first property for the deslgiji, wherein the first property describes a first 
behavior; 

checking the model using the first 
at a reset state until an example of the first behavior 

providing a second property for the 
second behavior; and 

checking the model using the second 
starting at a state when the example of the first 



9. The computer program of claim] 8, wherein providing the first property 
25 comprises: 

providing a statement in a specification]; 
not occur. 



10. The computer program of claim 
comprises one or more environment variables, 
first property comprises: 
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propjerty and an environment of the design starting 
occurs; 

i de^gn, wherein the second property describes a 

pjjoperty and an environment of the design 
behavior occurs. 



language stating that the first behavior does 



9, wherein the environment of the design 
md wherein checking the model using the 
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determining a set of values for the 
design to show an example of the first behavior 
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en aronment variables that causes the model of the 



1 1 . The computer program of claihi 
providing a state of the model of the 



8, further comprising; 
design when the example of the fii-st behavior 



occurs. 



12. The computer program of claiii 
providing the environment of the desi 



8, further comprising: 
i{n starting at the reset state. 



13, The computer program of 
providing the environment of the 
first behavior occurs. 



claira 8, further comprising: 
design starting at a state when the example of the 



14. The computer program of claii^ 13: 
wherein the environment of the 
wherein the model of the design 
wherein providing the environment of 
first behavior occurs comprises at least one of jthc 
describing the state when the e: 
providing the values of the 
each clock cycle preceding the exampl 
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design comprises one or more environment variables; 
comp: ises one or more model variables; and 

he design at the state when the example of the 
group consisting of: 
i^ample of the first behavior occurs; and 
environment variables and the model variables in 
when the first behaviour occurs. 
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